Re: cf-talk blacklisted again by spamcop

2006-02-20 Thread Rick Root
Emmet McGovern wrote:
> #2 eliminates most spam filter gateway setups out there.  

You're correct, of course.  That doesn't change the fact that I could 
force their server to send out thousands of my spam messages to external 
users using the method I described.

Presumably, spamcop lists servers that deal out bounces when those 
bounces are reported by spamcop users as spam, in which case, the 
offending server sending the bouncebacks gets blacklisted.  which may be 
temporary, of course but if that server *IS* being abused and people 
consistently report such bounceback spam coming from that server, it'll 
stay blacklisted.

Now of course, a good spam filter gateway wouldn't let my milliion spam 
messages in in the first place, so they wouldn't have to worry about it. 
  Also, if such gateways are not aware of existing users on the internal 
network, they could save themselves a lot of processing time by BEING 
aware of valid users on the internal network.

rick

~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:232952
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54


RE: cf-talk blacklisted again by spamcop

2006-02-20 Thread Emmet McGovern
#2 eliminates most spam filter gateway setups out there.  

-Original Message-
From: Rick Root [mailto:[EMAIL PROTECTED] 
Sent: Monday, February 20, 2006 1:34 PM
To: CF-Talk
Subject: Re: cf-talk blacklisted again by spamcop

Emmet McGovern wrote:
> 
> BTW.  Spamcop is also the RBL that blacklists servers that deal out bounce
> backs.

Let's say I've got a mailing list of a million working email addresses, 
and I find a server that accepts all email before checking for invalid 
users.  Let's also say that server bounces the whole message and not 
just the headers like some do.

Instead of spamming the users directly, I can send my spam FROM those 
million users to invalid accounts at the mail server that bounces them. 
  That mail server accepts the mail then sends my spam to the people I 
intended as a Mail Delivery Error, which people *ARE* likely to look at 
because they think they sent a mail that bounced.

There are two things that NO mail servers should ever do:

#1 - send responses to virus emails
#2 - accept mail for unknown users and then bounce.

If you're running a server that is being abused the way I described 
above, then your server deserves to be blacklisted.

Rick





~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:232942
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54


Re: cf-talk blacklisted again by spamcop

2006-02-20 Thread Rick Root
Emmet McGovern wrote:
> 
> BTW.  Spamcop is also the RBL that blacklists servers that deal out bounce
> backs.

Let's say I've got a mailing list of a million working email addresses, 
and I find a server that accepts all email before checking for invalid 
users.  Let's also say that server bounces the whole message and not 
just the headers like some do.

Instead of spamming the users directly, I can send my spam FROM those 
million users to invalid accounts at the mail server that bounces them. 
  That mail server accepts the mail then sends my spam to the people I 
intended as a Mail Delivery Error, which people *ARE* likely to look at 
because they think they sent a mail that bounced.

There are two things that NO mail servers should ever do:

#1 - send responses to virus emails
#2 - accept mail for unknown users and then bounce.

If you're running a server that is being abused the way I described 
above, then your server deserves to be blacklisted.

Rick



~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:232935
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54


RE: cf-talk blacklisted again by spamcop

2006-02-20 Thread Emmet McGovern
We use spam cop but give it a relatively low weight when it comes to marking
spam.  It has way too many legit servers on it.  

BTW.  Spamcop is also the RBL that blacklists servers that deal out bounce
backs.

Emmet

-Original Message-
From: Rick Root [mailto:[EMAIL PROTECTED] 
Sent: Monday, February 20, 2006 9:15 AM
To: CF-Talk
Subject: Re: cf-talk blacklisted again by spamcop

Jochem van Dieten wrote:
> Michael Dinowitz wrote:
> 
>>For personal mail this might be an effective option, but can you see the 
>>firestorm if list mail was slowed down? :)
> 
> Nobody notices a 10 or 15 second slowdown (you can go full speed 
> after that).

I don't know many mail servers that try again after 15 seconds.  I can't 
find any specific documentation, but most mail servers try once every 
minute for the first hour I think for temporary failures.

However, as long as houseoffusion.com is running it's own mail server, 
there's really no need for greylisting since non-subscribers can't post 
anyway.

rick



~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:232921
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54


Re: cf-talk blacklisted again by spamcop

2006-02-20 Thread Rick Root
Jochem van Dieten wrote:
> Michael Dinowitz wrote:
> 
>>For personal mail this might be an effective option, but can you see the 
>>firestorm if list mail was slowed down? :)
> 
> Nobody notices a 10 or 15 second slowdown (you can go full speed 
> after that).

I don't know many mail servers that try again after 15 seconds.  I can't 
find any specific documentation, but most mail servers try once every 
minute for the first hour I think for temporary failures.

However, as long as houseoffusion.com is running it's own mail server, 
there's really no need for greylisting since non-subscribers can't post 
anyway.

rick

~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:232909
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54


Re: cf-talk blacklisted again by spamcop

2006-02-19 Thread Jochem van Dieten
Dave Watts wrote:
>> 
>> I have mentioned the emailaddress i-need-a-gf @ vandieten . 
>> net in the body of an email on this list once. Just once. I 
>> think it was quoted one more time in an answer. Now, several 
>> years later, I get about 20 spam messages to that address 
>> every day.
> 
> Yes, but more importantly, did any of those messages help you find a gf?

Only the ones that charge by the minute.

Jochem

~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:232875
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54


Re: cf-talk blacklisted again by spamcop

2006-02-19 Thread Jochem van Dieten
Michael Dinowitz wrote:
> For personal mail this might be an effective option, but can you see the 
> firestorm if list mail was slowed down? :)

Nobody notices a 10 or 15 second slowdown (you can go full speed 
after that).


> As for adding it on a personal level (or mail server one), is there any good 
> instructions?

Most big *nix mailservers support it in some way or another. For 
Windows there is one proxy implementation that does generic 
greylisting: http://www.greylisting.org/implementations/

The 10 second slowdown feature is not the usual implementation of 
greylisting but is specific for OpenBSDs spamd and is implemented 
in the firewall instead of the SMTP server. If you want to use 
that, you need to place an OpenBSD box in your network as firewall.

Jochem


~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:232874
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54


Re: cf-talk blacklisted again by spamcop

2006-02-19 Thread Michael Dinowitz
For personal mail this might be an effective option, but can you see the 
firestorm if list mail was slowed down? :)

As for adding it on a personal level (or mail server one), is there any good 
instructions?

> Use greylisting, no hacking or banning needed, it is a purely
> technical process.
>
> For instance, if you just make your SMTP server send 1 byte per
> second for the first 10 seconds of an incomming mail dialogue,
> more then 20% of your spam disappears because the sender thinks
> you are too slow and moves on to more lucrative victims:
> http://www.openbsd.org/papers/bsdcan05-spamd/mgp6.html
>
> Jochem
>
> 

~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:232873
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54


Re: cf-talk blacklisted again by spamcop

2006-02-19 Thread Jochem van Dieten
Michael Dinowitz wrote:
>> 
>> It takes more than "anyone" it takes numerous "someones".  One spam 
>> report to spamcop doesn't cause you to get blacklisted.
> I can easily 'hack' this process and ban anyone I choose. This is one of the 
> reasons I don't use any RBL for my spam checker.

Use greylisting, no hacking or banning needed, it is a purely 
technical process.

For instance, if you just make your SMTP server send 1 byte per 
second for the first 10 seconds of an incomming mail dialogue, 
more then 20% of your spam disappears because the sender thinks 
you are too slow and moves on to more lucrative victims: 
http://www.openbsd.org/papers/bsdcan05-spamd/mgp6.html

Jochem

~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:232872
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54


Re: cf-talk blacklisted again by spamcop

2006-02-19 Thread Michael Dinowitz
>> This is one of the reasons I don't use any RBL for my spam checker. I 
>> wrote it myself and let me tell you that while it takes a few moments to 
>> review some of the subjects, my success rate is 100% blocked with the 
>> only mistakes coming from people who send mail without a subject. (red 
>> flagged, not deleted, but sometimes deleted by the human eye process.)
>
> You've got a lot more time on your hands than me, apparently =)
Actually, I don't. The anti-spam package I wrote is about 3 years old and 
based heavily on proper headers and regex patterns in subjects. Alone, it 
will remove at least 75% of spam while labeling another 23% (or more) as 
possible spam with different ratings. This, combined with a few extra rules 
is what keeps the lists safe even from spam that comes from a forged 
address.
If I had time I'd add in the large site (LS) module which will set some 
specific sites (google, paypal, ebay, amazon) and their expected received 
domains, message-id domains and the like. If a message comes in that is not 
from an expected domain in the received or message-id, then it's trashed. If 
it looks legal, it'll check a table of expected IPs. If it's not there (an 
extreme case), then it'll do a fast ip lookup. I'd say 95%+ of the spam that 
says its from these domains will die in the first check easily. The few that 
forge the proper received and message-id will die in IP lookup. 
exceptionally few will hit the third test. It's a simple module and rather 
foolproof. As LS mail is always coming from a proper location, it'll really 
reduce phishing attacks. 


~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:232871
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54


RE: cf-talk blacklisted again by spamcop

2006-02-19 Thread Dave Watts
> I would move bl.spamcop.net and dsn.rfc-ignorant.org from 
> blocking spam to adding points in SpamAssassin and instead add
> greylisting: http://www.greylisting.org/

I second the greylisting recommendation. We recently implemented it, and
it's provided a significant improvement.

> I have mentioned the emailaddress i-need-a-gf @ vandieten . 
> net in the body of an email on this list once. Just once. I 
> think it was quoted one more time in an answer. Now, several 
> years later, I get about 20 spam messages to that address 
> every day.

Yes, but more importantly, did any of those messages help you find a gf?

Dave Watts, CTO, Fig Leaf Software
http://www.figleaf.com/

Fig Leaf Software provides the highest caliber vendor-authorized
instruction at our training centers in Washington DC, Atlanta,
Chicago, Baltimore, Northern Virginia, or on-site at your location.
Visit http://training.figleaf.com/ for more information!


~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:232870
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54


Re: cf-talk blacklisted again by spamcop

2006-02-19 Thread Jochem van Dieten
Rick Root wrote:
> Jochem van Dieten wrote:
>>> Spamcop listed houseoffusion because of some DNS/hostname configuration 
>>> issues.
>> SCBL does not work that way. SCBL lists IP addresses based on 
>> spam reports: http://www.spamcop.net/fom-serve/cache/297.html
> 
> Actually, Spamcop *DOES* work that way sometimes, and in this particular 
> case, it did.  House of Fusion was blacklisted because of DNS and 
> hostname issues, as Michael has already pointed out.
> 
> When I looked up the IP address, it said it was the DNS mismatch that 
> caused it to be blacklisted, because spamcop feels that any mail server 
> trying to masquerade as another host with a different IP address is 
> probably a spammer.

That is fun for anybody running CF 5 and older and talking to a 
host that forwards to SpamCop: they use the hostname of the 
recipient SMTP server instead of their own hostname in the HELO 
dialogue :)


>> I am a big fan of RBLs, but I very much question the wisdom of 
>> using SCBL to block email. Do you really want to give anybody 
>> with a SpamCop account the power to stop your email?
> 
> It takes more than "anyone" it takes numerous "someones".  One spam 
> report to spamcop doesn't cause you to get blacklisted.

It takes 2 reports. They don't have to be from different sources.


> I block the spamcop listed email for two main reasons.
> 
> #1 - my users don't want to do their own filtering
> #2 - if someone (a person not a list) sends legitimate email and their 
> mail server is listed in spamcop, they'll get a bounced message that 
> tells them why.  That's actually better than the mail being accepted and 
> thrown into a spam folder, because the original sender gets immediate 
> feedback.

These features are not unique to SCBL or even to RBLs.

But rejecting email instead of accepting and then sending a non 
delivery notification is why I am such a fan of RBLs and 
greylisting. Once you have responded "OK" to the other SMTP 
server and have accepted an email message you are responsible for 
it. There really is no good way for a postmaster to deal with 
suspected spam then: you can not delete it because it might be a 
false positive, you can not bounce it because 99% of the time you 
are bouncing to an innocent bystander so you have no other option 
but to deliver it. Outright rejection is indead the way to deal 
with this.

Jochem

~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:232869
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54


Re: cf-talk blacklisted again by spamcop

2006-02-19 Thread Rick Root
Michael Dinowitz wrote:
>
> Yes, a month ago. So why are they having problems now?

Or rather, Friday night, they're not "now".. but a good question 
nonetheless.

> This is one of the reasons I don't use any RBL for my spam checker. I wrote 
> it myself and let me tell you that while it takes a few moments to review 
> some of the subjects, my success rate is 100% blocked with the only mistakes 
> coming from people who send mail without a subject. (red flagged, not 
> deleted, but sometimes deleted by the human eye process.)

You've got a lot more time on your hands than me, apparently =)

Rick



~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:232866
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54


Re: cf-talk blacklisted again by spamcop

2006-02-19 Thread Michael Dinowitz
>Actually, Spamcop *DOES* work that way sometimes, and in this particular 
>case, it did.  House of Fusion was blacklisted because of DNS and 
>hostname issues, as Michael has already pointed out.
Yes, a month ago. So why are they having problems now?

>When I looked up the IP address, it said it was the DNS mismatch that 
>caused it to be blacklisted, because spamcop feels that any mail server 
>trying to masquerade as another host with a different IP address is 
>probably a spammer.
Yes, the IP was for mail.houseoffusion.com and the header said 
houseoffusion.com. Intelligent software would be more lenient in such a case or 
at least give it a flag to be checked rather than send it directly to a black 
hole.

>It takes more than "anyone" it takes numerous "someones".  One spam 
>report to spamcop doesn't cause you to get blacklisted.
I can easily 'hack' this process and ban anyone I choose. This is one of the 
reasons I don't use any RBL for my spam checker. I wrote it myself and let me 
tell you that while it takes a few moments to review some of the subjects, my 
success rate is 100% blocked with the only mistakes coming from people who send 
mail without a subject. (red flagged, not deleted, but sometimes deleted by the 
human eye process.)

>I block the spamcop listed email for two main reasons.
>
>#1 - my users don't want to do their own filtering
>#2 - if someone (a person not a list) sends legitimate email and their 
>mail server is listed in spamcop, they'll get a bounced message that 
>tells them why.  That's actually better than the mail being accepted and 
Not exactly true. I found out about the problem first from a concerned list 
member and the spamcop entries I still see to this day are from other peoples 
mail with no message sent to me as the mail server admin.

>I suppose we're *WAY* off topic here =)
Actually, yes we are but there is a little more leaway on the weekend. Not 
much, but enough as long as the talk is still technical.

~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:232864
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54


Re: cf-talk blacklisted again by spamcop

2006-02-19 Thread Rick Root
Jochem van Dieten wrote:
> 
>> Spamcop listed houseoffusion because of some DNS/hostname configuration 
>> issues.
> 
> SCBL does not work that way. SCBL lists IP addresses based on 
> spam reports: http://www.spamcop.net/fom-serve/cache/297.html

Actually, Spamcop *DOES* work that way sometimes, and in this particular 
case, it did.  House of Fusion was blacklisted because of DNS and 
hostname issues, as Michael has already pointed out.

When I looked up the IP address, it said it was the DNS mismatch that 
caused it to be blacklisted, because spamcop feels that any mail server 
trying to masquerade as another host with a different IP address is 
probably a spammer.

> I am a big fan of RBLs, but I very much question the wisdom of 
> using SCBL to block email. Do you really want to give anybody 
> with a SpamCop account the power to stop your email?

It takes more than "anyone" it takes numerous "someones".  One spam 
report to spamcop doesn't cause you to get blacklisted.

I block the spamcop listed email for two main reasons.

#1 - my users don't want to do their own filtering
#2 - if someone (a person not a list) sends legitimate email and their 
mail server is listed in spamcop, they'll get a bounced message that 
tells them why.  That's actually better than the mail being accepted and 
thrown into a spam folder, because the original sender gets immediate 
feedback.

I suppose we're *WAY* off topic here =)

Rick

~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:232863
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54


Re: cf-talk blacklisted again by spamcop

2006-02-19 Thread Jochem van Dieten
Rick Root wrote:
> 
> My mail server, which isn't particularly large, has blocked over 32,000 
> incoming connections via various RBLs
> 
> dsn.rfc-ignorant.org list.dsbl.org relays.ordb.org bl.spamcop.net 
> sbl-xbl.spamhaus.org.

I would move bl.spamcop.net and dsn.rfc-ignorant.org from 
blocking spam to adding points in SpamAssassin and instead add 
greylisting: http://www.greylisting.org/


> And since I reject mail to invalid recipients, that's another 3,142 
> messages.  757 of those are to an email address I haven't used in 6 
> years, though I still own the domain.

I have mentioned the emailaddress i-need-a-gf @ vandieten . net 
in the body of an email on this list once. Just once. I think it 
was quoted one more time in an answer. Now, several years later, 
I get about 20 spam messages to that address every day.

Jochem

~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:232862
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54


Re: cf-talk blacklisted again by spamcop

2006-02-19 Thread Jochem van Dieten
Rick Root wrote:
> Jochem van Dieten wrote:
>> If the spamcop RBL routinely lists legitimate hosts, why do you 
>> use it?
> 
> The answer is obvious.
> 
> *ALL* RBL lists contain some legitimate hosts from time to time.  IMO.

Some: yes. From time to time: yes. Routinely: no.


> Spamcop listed houseoffusion because of some DNS/hostname configuration 
> issues.

SCBL does not work that way. SCBL lists IP addresses based on 
spam reports: http://www.spamcop.net/fom-serve/cache/297.html


I am a big fan of RBLs, but I very much question the wisdom of 
using SCBL to block email. Do you really want to give anybody 
with a SpamCop account the power to stop your email?

Jochem


~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:232860
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54


Re: cf-talk blacklisted again by spamcop

2006-02-19 Thread Rick Root
for what it's worth, I hate spam.  And spam blocking/filtering is a 
necessary evil, unfortunately.  The harder you try to block spam, the 
more likely you are to not see legitimate email.

My mail server, which isn't particularly large, has blocked over 32,000 
incoming connections via various RBLs

dsn.rfc-ignorant.org list.dsbl.org relays.ordb.org bl.spamcop.net 
sbl-xbl.spamhaus.org.

In that same timeframe, I've also blocked 987 messages tagged with spam 
assassin scores higher than 8.0, and 76 viruses.

And since I reject mail to invalid recipients, that's another 3,142 
messages.  757 of those are to an email address I haven't used in 6 
years, though I still own the domain.

That's out of 41,000 incoming connections in the last 7-1/2 days. 
Nearly 88% spam mail, or mail coming from likely spammers.

I'd hate to see my inbox if I stopped using RBLs.

Rick

~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:232859
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54


Re: cf-talk blacklisted again by spamcop

2006-02-19 Thread Michael Dinowitz
A little over a month ago I made a DNS config change from 64.118.74.245 to 
46.118.74.249 but forgot to set the mail server to say 
mail.houseoffusion.com rather than houseoffusion.com. I fixed it really fast 
when I saw a spamcop block but to this day I still see people blocked due to 
spamcop despite being told by spamcop that it's all good. In some cases it's 
a cached spamcop reference on someone's system, in others it's spamcops 
fault. Bottom line is that I haven't changed anything with the mail for over 
a month now so if there is a spamcop entry, it's false.


> Jochem van Dieten wrote:
>>
>> If the spamcop RBL routinely lists legitimate hosts, why do you
>> use it?
>
> The answer is obvious.
>
> *ALL* RBL lists contain some legitimate hosts from time to time.  IMO.
>
> Spamcop listed houseoffusion because of some DNS/hostname configuration
> issues.  I guess the mail coming from houseoffusion said it was coming
> from a specific hostname whose IP address was different than the actual
> IP address it was coming from.
>
> Rick
>
>
> 

~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:232857
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54


Re: cf-talk blacklisted again by spamcop

2006-02-19 Thread Rick Root
Jochem van Dieten wrote:
> 
> If the spamcop RBL routinely lists legitimate hosts, why do you 
> use it?

The answer is obvious.

*ALL* RBL lists contain some legitimate hosts from time to time.  IMO.

Spamcop listed houseoffusion because of some DNS/hostname configuration 
issues.  I guess the mail coming from houseoffusion said it was coming 
from a specific hostname whose IP address was different than the actual 
IP address it was coming from.

Rick


~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:232855
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54


Re: cf-talk blacklisted again by spamcop

2006-02-19 Thread Jochem van Dieten
Rick Root wrote:
> I'm not getting any cf-talk email again, started sometime last night.
> 
> Here's an entry from my smtp server's log file
> 
> @400043f75bc5074da2f4 rblsmtpd: 64.118.74.249 pid 19425: 451 Blocked 
> - see http://www.spamcop.net/bl.shtml?64.118.74.249
> 
> Looks like the same problem as before with the DNS or something

If the spamcop RBL routinely lists legitimate hosts, why do you 
use it?

Jochem

~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:232832
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54


Re: cf-talk blacklisted again by spamcop

2006-02-18 Thread Rick Root
Claude Schneegans wrote:
>  >>Here's an entry from my smtp server's log file
>  >>- see http://www.spamcop.net/bl.shtml?64.118.74.249
> 
> Returns « 64.118.74.249 not listed in bl.spamcop.net »
> 
> Might be a problem with your smtp server ?

Or, they fixed it pretty quickly after I reported it.  Cuz when I 
clicked on that url, it was listed, or I wouldn't have posted to the list =)

Looks like we're all good again, I was going through cf-talk withdrawal.

Rick

~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:232806
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54


Re: cf-talk blacklisted again by spamcop

2006-02-18 Thread Claude Schneegans
 >>Here's an entry from my smtp server's log file
 >>- see http://www.spamcop.net/bl.shtml?64.118.74.249

Returns « 64.118.74.249 not listed in bl.spamcop.net »

Might be a problem with your smtp server ?

-- 
___
REUSE CODE! Use custom tags;
See http://www.contentbox.com/claude/customtags/tagstore.cfm
(Please send any spam to this address: [EMAIL PROTECTED])
Thanks.



~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:232793
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54


cf-talk blacklisted again by spamcop

2006-02-18 Thread Rick Root
I'm not getting any cf-talk email again, started sometime last night.

Here's an entry from my smtp server's log file

@400043f75bc5074da2f4 rblsmtpd: 64.118.74.249 pid 19425: 451 Blocked 
- see http://www.spamcop.net/bl.shtml?64.118.74.249

Looks like the same problem as before with the DNS or something

Rick


~|
Message: http://www.houseoffusion.com/lists.cfm/link=i:4:232789
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54